Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
File:                     mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft (raw, json)
Hash identifier:          Q31qWle1finEnHSfQ5ckr9IqY3Dcv0zsj3SBnep9aR4=
Subject key identifier:   36:EA:15:0D:0D:C2:95:00:84:3B:BB:94:AE:80:85:03:56:F7:CA:5F
Authority key identifier: 99:44:07:8B:40:77:2B:17:2C:70:46:E7:44:62:04:98:0C:EA:E1:39
Certificate issuer:       /CN=9944078b40772b172c7046e7446204980ceae139
Certificate serial:       0198D5F12EC0B924BB887B7465CBA507E6BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
Manifest number:          161F
Signing time:             Sat 23 Aug 2025 08:00:09 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:09 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:09 +0000
Files and hashes:         1: Ku7W6RCmGf1FMZYF6bxZkcHlJ3U.roa (hash: yodxfHzeCCrONRmxjgNBHi9TEwJB+PIep9C2GIrnRgo=)
                          2: mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl (hash: eK/lNVXtFQHfr89Xbzbibdy9kzFjk+D3j53WqCG7AsA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:2e:c0:b9:24:bb:88:7b:74:65:cb:a5:07:e6:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9944078b40772b172c7046e7446204980ceae139
        Validity
            Not Before: Aug 23 08:00:09 2025 GMT
            Not After : Aug 24 08:00:09 2025 GMT
        Subject: CN=36ea150d0dc29500843bbb94ae80850356f7ca5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9f:b7:d8:d2:fa:8a:cd:9b:bd:b0:1c:d6:ed:
                    68:1d:23:fa:1e:ef:c7:81:84:9c:be:3b:41:8c:09:
                    11:7d:35:ec:03:12:5f:df:8d:da:69:96:04:91:a6:
                    00:ac:3f:5c:da:10:d0:c1:db:32:5f:f0:83:96:d1:
                    06:91:7e:87:33:1d:c3:08:71:0c:b8:23:d0:58:e5:
                    cd:7e:0d:b9:40:f6:fc:12:22:46:51:24:24:4a:8e:
                    2a:90:b7:e6:44:ca:5d:21:a7:7f:d8:80:f0:7c:cb:
                    41:83:de:26:50:3f:51:9e:e8:b2:1d:c3:a7:b2:73:
                    90:ce:31:06:51:66:26:62:2b:07:48:7a:9a:02:5b:
                    f6:bd:7d:fe:4a:28:71:e5:b1:c2:ef:8f:9e:d5:2a:
                    7a:79:94:e1:f6:83:ba:91:fa:4f:bb:79:85:1a:50:
                    fc:00:ec:25:65:ba:f9:54:7b:3d:b0:e4:49:af:fe:
                    f2:0e:66:2d:80:0e:4c:b2:24:a1:12:b4:74:ec:80:
                    ab:a0:9e:49:69:9c:ca:9d:98:83:a4:94:05:41:03:
                    f8:89:6f:1b:63:20:bd:7a:d8:e0:7d:63:fa:ab:34:
                    47:cd:6a:c7:40:04:ec:0b:90:d8:30:62:ee:86:95:
                    6e:27:c5:24:d1:b8:b5:f0:f2:f3:95:11:36:1a:52:
                    6d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:EA:15:0D:0D:C2:95:00:84:3B:BB:94:AE:80:85:03:56:F7:CA:5F
            X509v3 Authority Key Identifier:
                keyid:99:44:07:8B:40:77:2B:17:2C:70:46:E7:44:62:04:98:0C:EA:E1:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:a5:98:f2:74:7b:8b:86:71:53:dc:11:17:d0:5e:2b:69:28:
         19:b7:0b:bb:3c:6b:02:5c:66:8d:8a:49:0e:69:48:c7:bc:0e:
         ea:23:e6:8d:b4:00:60:b6:6a:9f:d1:18:00:2f:b0:fb:e2:0a:
         db:3f:39:77:f7:03:65:46:90:38:92:03:1b:8a:7f:52:fa:c2:
         b8:22:2b:2f:cc:b7:70:d3:64:7d:f9:3e:3b:60:e6:c9:37:ac:
         57:2a:4e:e7:7a:9c:3a:6a:f9:04:d8:2e:bf:43:f8:c7:84:41:
         9a:b0:a1:d2:0c:6f:4d:b4:5c:2f:08:32:04:2b:ed:e9:de:bb:
         56:25:16:a1:78:7b:02:63:d8:6c:c6:56:dc:22:32:87:69:70:
         8b:31:73:d6:1c:da:e6:75:56:97:78:67:9e:77:5e:d9:4c:ca:
         1f:88:7a:b2:b0:4f:ea:6e:81:6b:c0:c5:c4:a8:e5:dd:f7:d6:
         e2:42:3e:90:be:2f:9e:30:5b:7a:98:e7:81:18:9f:ff:d4:43:
         a2:aa:ea:1a:74:dc:a7:1e:10:3a:f2:54:14:25:55:11:0f:9e:
         3b:2d:da:90:eb:5f:a8:51:a4:b4:18:02:22:8d:c0:2e:41:d3:
         7d:c0:bd:23:79:2a:30:f2:28:5c:e5:1d:00:e7:d6:4a:c8:48:
         3e:25:51:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8S7AuSS7iHt0ZculB+a+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5NDQwNzhiNDA3NzJiMTcyYzcwNDZlNzQ0NjIwNDk4MGNl
YWUxMzkwHhcNMjUwODIzMDgwMDA5WhcNMjUwODI0MDgwMDA5WjAzMTEwLwYDVQQD
EygzNmVhMTUwZDBkYzI5NTAwODQzYmJiOTRhZTgwODUwMzU2ZjdjYTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ+32NL6is2bvbAc1u1oHSP6Hu/H
gYScvjtBjAkRfTXsAxJf343aaZYEkaYArD9c2hDQwdsyX/CDltEGkX6HMx3DCHEM
uCPQWOXNfg25QPb8EiJGUSQkSo4qkLfmRMpdIad/2IDwfMtBg94mUD9RnuiyHcOn
snOQzjEGUWYmYisHSHqaAlv2vX3+Sihx5bHC74+e1Sp6eZTh9oO6kfpPu3mFGlD8
AOwlZbr5VHs9sORJr/7yDmYtgA5MsiShErR07ICroJ5JaZzKnZiDpJQFQQP4iW8b
YyC9etjgfWP6qzRHzWrHQATsC5DYMGLuhpVuJ8Uk0bi18PLzlRE2GlJtOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbqFQ0NwpUAhDu7lK6AhQNW98pfMB8GA1UdIwQY
MBaAFJlEB4tAdysXLHBG50RiBJgM6uE5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVVRSGkwQjNLeGNzY0ViblJHSUVtQXpxNFRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8wNDhkZjYtYmNjZC00ODg1LThmNDMt
NGRjMjA3MWE1YmYxLzEvbVVRSGkwQjNLeGNzY0ViblJHSUVtQXpxNFRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8wNDhkZjYtYmNjZC00ODg1LThmNDMtNGRjMjA3MWE1YmYx
LzEvbVVRSGkwQjNLeGNzY0ViblJHSUVtQXpxNFRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI6WY8nR7
i4ZxU9wRF9BeK2koGbcLuzxrAlxmjYpJDmlIx7wO6iPmjbQAYLZqn9EYAC+w++IK
2z85d/cDZUaQOJIDG4p/UvrCuCIrL8y3cNNkffk+O2DmyTesVypO53qcOmr5BNgu
v0P4x4RBmrCh0gxvTbRcLwgyBCvt6d67ViUWoXh7AmPYbMZW3CIyh2lwizFz1hza
5nVWl3hnnnde2UzKH4h6srBP6m6Ba8DFxKjl3ffW4kI+kL4vnjBbepjngRif/9RD
oqrqGnTcpx4QOvJUFCVVEQ+eOy3akOtfqFGktBgCIo3ALkHTfcC9I3kqMPIoXOUd
AOfWSshIPiVREw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:28:22 2025 by rpki-client